DigiCert Root Compatibility

Description

DigiCert Root Compatibility

DigiCert SSL Certificates are issued under one of the oldest and most widely supported roots in the industry. DigiCert roots are trusted by virtually every browser in use today, as well as dozens of smart phones and handheld computing devices.

As one of the largest certificate providers in the world, certificates issued by DigiCert are trusted by all popular browsers, mail clients, and operating systems.

Root CA	Signature Algorithm	Serial number
DigiCert Global Root CA	SHA1withRSA	08 3b e0 56 90 42 46 b1 a1 75 6a c9 59 91 c7 4a
DigiCert Global Root G2	SHA256withRSA	03 3a f1 e6 a7 11 a9 a0 bb 28 64 b1 1d 09 fa e5
DigiCert Global Root G3	SHA384withECDSA	05 55 56 bc f2 5e a4 35 35 c3 a4 0f d5 ab 45 72
DigiCert High Assurance EV Root CA	SHA1withRSA	02 ac 5c 26 6a 0b 40 9b 8f 0b 79 f2 ae 46 25 77
Baltimore CyberTrust Root	SHA1withRSA	02 00 00 b9
VeriSign Class 3 Public Primary Certification Authority – G5	SHA1withRSA	18 da d1 9e 26 7d e8 bb 4a 21 58 cd cc 6b 3b 4a

Recommended certificate chain

Choose the appropriate certificate chain based on your client requirements.

Client support requirements	OV hierarchy	EV hierarchy
Modern browsers and smart phones	Mixed SHA256	Mixed SHA256
Older browsers, smart phones, and feature phones including old versions	Mixed SHA256 with a cross root under Baltimore Root	Mixed SHA256 with a cross root under Baltimore Root
Java	Mixed SHA256 with a cross root under Baltimore Root	Mixed SHA256 with a cross root under Baltimore Root
Non-browser with VeriSign G5 root only	Full SHA256 with a cross root under VeriSign G5 Root	Full SHA256 with a cross root under VeriSign G5 Root
Non-browser with VeriSign G5 root pinning	Full SHA256 with a cross root under VeriSign G5 Root	Full SHA256 with a cross root under VeriSign G5 Root

Root support in common browsers and operating systems

Windows

Root CA	Windows
DigiCert Global Root CA	Windows XP SP3 or higher
DigiCert Global Root G2	Windows XP SP3 or higher
DigiCert Global Root G3	Windows XP SP3 or higher
DigiCert High Assurance EV Root CA	Windows XP SP3 or higher
Baltimore CyberTrust Root	Windows XP SP3 or higher
VeriSign Class 3 Public Primary Certification Authority – G5	Windows XP SP3 or higher

Firefox

Reference: https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport

Root CA	Firefox 1	Firefox 2	Firefox 3.0.2	Firefox 32
DigiCert Global Root CA	N/A	Available	Available	Available
DigiCert Global Root G2	N/A	N/A	N/A	Available
DigiCert Global Root G3	N/A	N/A	N/A	Available
DigiCert High Assurance EV Root CA	N/A	Available	Available	Available
Baltimore CyberTrust Root	Available	Available	Available
VeriSign Class 3 Public Primary Certification Authority – G5	N/A	N/A	Available	Available

Apple

Reference:
iOS 5 and 6: https://support.apple.com/en-us/HT201388

iOS 7: https://support.apple.com/en-us/HT203065

iOS 8: https://support.apple.com/en-us/HT205214

Root CA	iOS 5 and 6	iOS 7	iOS 8
DigiCert Global Root CA	Available	Available	Available
DigiCert Global Root G2	N/A	Available	Available
DigiCert Global Root G3	N/A	Available	Available
DigiCert High Assurance EV Root CA	Available	Available	Available
Baltimore CyberTrust Root	Available	Available	Available
VeriSign Class 3 Public Primary Certification Authority – G5	Available	Available	Available

Reference: https://support.apple.com/en-us/HT203120

Root CA	OS Leopard	OS X Mavericks	OS X Yosemite
DigiCert Global Root CA	Available	Available	Available
DigiCert Global Root G2	N/A	Available	Available
DigiCert Global Root G3	N/A	Available	Available
DigiCert High Assurance EV Root CA	Available	Available	Available
Baltimore CyberTrust Root	Available	Available	Available
VeriSign Class 3 Public Primary Certification Authority – G5	Available	Available	Available

Android

Root CA	SDK 1.5	SDK 2.2	SDK 2.3	SDK 5.x
DigiCert Global Root CA	Available	Available	Available	Available
DigiCert Global Root G2	N/A	N/A	N/A	Available
DigiCert Global Root G3	N/A	N/A	N/A	N/A
DigiCert High Assurance EV Root CA	Available	Available	Available	Available
Baltimore CyberTrust Root	N/A	N/A	Available	Available
VeriSign Class 3 Public Primary Certification Authority – G5	N/A	Available	Available	Available

Java

Root CA	JRE 1.4.1	JRE 1.4.2_17	JRE 1.6.0_11	JRE 1.6.0_19	JRE 1.8.0_101
DigiCert Global Root CA	N/A	Available	Available	Available	Available
DigiCert Global Root G2	N/A	N/A	N/A	N/A	Available
DigiCert Global Root G3	N/A	N/A	N/A	N/A	Available
DigiCert High Assurance EV Root CA	N/A	N/A	Available	Available	Available
Baltimore CyberTrust Root	Available	Available	Available	Available	Available
VeriSign Class 3 Public Primary Certification Authority – G5	N/A	N/A	N/A	Available	Available

Mixed SHA256 OV hierarchy

Mixed SHA256 OV hierarchy with a cross root under Baltimore Root

Mixed SHA256 EV hierarchy

Mixed SHA256 EV hierarchy with a cross root under Baltimore Root

Full SHA256 OV hierarchy with a cross root under VeriSign G5 Root

Full SHA256 EV hierarchy with a cross root under VeriSign G5 Root

SSL Intermediate and Root CA Certificates

https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=INFO4033

The need for a cross root under the Baltimore Root or VeriSign G5 Root is handled on a case-by-case basis. Contact Technical Support for help with determining if you have a dependency on one of these roots.

Security Solutions
at a ease

Contact Support

Select a Country / Region

Ask a Question